Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-25436 EUVD-2026-28330GHSA-mqxj-f3xw-28v4

WordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerability

Published May 7, 2026 · Updated May 7, 2026 · Assigned by Patchstack

Vendor: WP Royal Product: Royal Elementor Addons

Description

Missing Authorization vulnerability in WProyal Royal Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Royal Elementor Addons: from n/a before 1.7.1053.

Affected products

VendorProductAffectedFixed
WProyal Royal Elementor Addons < 1.7.1053 1.7.1053

References